sudoers.d files must be 0440 (ubuntu 12.04)